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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims 

Claim 1 (currently amended): A method of organizing web log data prior to storing the web log 
data, said method comprising: 

accessing configuration information associated with the web log data to be stored, said 
configuration information including at least one expression and defining a log cut interval ; 

creating and opening a web log file; 

receiving the web log data to be stored from a web server, said web log data including at 
least one condition associated therewith, said condition affecting storage of the received web log 
data , said received web log data being in a format defined by the web server ; 

evaluating the expression from the accessed configuration information, said evaluation 
occurring based on the condition associated with the received web log data, wherein the 
expression specifics one or more operations for organizing the received web log data; and 

storing at least a portion of the received web log data in the opened web log file in 
accordance with the expression evaluated based on the condition associated with the received 
data web log data without modifying the format of the received web log data defined by the web 
server, wherein the opened web log file is closed and a new web log file is created and opened 
based on the log cut interval . 

Claim 2 (currently amended): The method of claim 1 , further comprising formatting the web log 
data in accordance with the accessed configuration information prior to storing the web log data. 

Claim 3 (currently amended): The method of claim 1, wherein receiving the web log data 
comprises receiving clickstream web log data and the condition associated therewith from a web 
server, and further comprising dividing the received clickstream web log data into a plurality of 
portions based on the expression evaluated based on the received condition. 
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Claim 4 (canceled). 

Claim 5 (original): The method of claim 1, further comprising receiving the configuration 
information from a user. 

Claim 6 (original): The method of claim 1, wherein accessing the configuration information 
comprises reading configuration information from a central hierarchical database. 

Claim 7 (original): The method of claim 1, further comprising maintaining a history of evaluated 
expressions to track a sequence of the evaluated expressions. 

Claim 8 (currently amended): The method of claim 7, wherein the web log data is received from 
a computing device, and wherein maintaining the history comprises storing a cookie associated 
with the computing device, said cookie including the sequence of the evaluated expressions. 

Claim 9 (original): The method of claim 1, wherein evaluating the expression comprises 
recursively evaluating portions of the expression using the condition. 

Claim 10 (currently amended): The method of claim 1 , wherein the web log data is received 
from a computing device and further comprising: 

authenticating the computing device; and 

opening a plurality of files to store the received web log data. 

Claim 1 1 (currently amended): The method of claim 1, wherein storing the received web log data 
comprises: 

preparing column web log data responsive to the received web log data and the evaluated 
expression; and 

storing the prepared column web log data in a file. 
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Claim 12 (currently amended): The method of claim 1, wherein evaluating the expression 
comprises: 

forwarding the received web log data to a filter component to evaluate the expression 
using the condition; and 

receiving the evaluated expression from the filter component. 

Claim 13 (currently amended): The method of claim 1, further comprising sampling the received 
web log data prior to storing the received web log data. 

Claim 14 (currently amended): The method of claim 1, wherein said receiving the web log data 
and said evaluating the expression occur in real-time. 

Claim 15 (previously presented): One or more computer storage media having computer- 
executable instructions for performing the method recited in claim 1. 

Claim 16 (currently amended): One or more computer storage media having computer- 
executable components for filtering web log data prior to storing the web log data, said 
components comprising: 

a configuration component to access configuration information associated with the web 
log data to be stored, said configuration information including at least one expression; 

an interface component to receive web log data to be stored from a web server, said web 
log data including at least one condition, said condition being associated with the web log data 
and affecting storage thereo f said received web log data being in a format defined by a web 
server ; 

an expression component to evaluate the expression accessed by the configuration 
component based on the condition received by the interface component , wherein the expression 
specifies one or more operations for organizing the received web log ; and 

a storage component to store the at least a portion of the received web log data received 
by the interface component in accordance with the expression evaluated by the expression 
component without modifying the format of the received web log data defined by the web server . 
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Claim 17 (currently amended) The computer storage media of claim 16, wherein the 
configuration component, when executed, creates structured web log data with enumerated 
values associated therewith based on the received configuration information. 

Claim 18 (currently amended): The computer storage media of claim 16, further comprising a 
helper component to parse the web log data received by the interface component for use by the 
expression component. 

Claim 19 (currently amended): The computer storage media of claim 16, further comprising an 
authentication component to obtain user information associated with the web log data received 
by the interface component. 

Claim 20 (currently amended): The computer storage media of claim 16, further comprising a 
scheduling component to create a file for use by the storage component to store the received web 
log data. 

Claim 21 (currently amended): A system for organizing web log data prior to storing the web 
log data, said system comprising: 

a memory area to store configuration information associated with the web log data to be 
stored, said configuration information including at least one expression wherein the expression 
specifies one or more operations for organizing the received web log data ; 

a computing device to process the web log data, said web log data including at least one 
condition associated therewith, said condition affecting storage of the web log data , said received 
web log data being in a format defined by a web server ; and 

a computer storage medium storing computer-executable instructions to be executed on 
the computing device to evaluate the expression from the configuration information stored in the 
memory area, said computing device evaluating the expression based on the condition associated 
with the web log data and to store at least a portion of the received web log data in accordance 
with the evaluated expression without modifying the format of the received web log data defined 
by the web server . 
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Claim 22 (currently amended): The system of claim 21, further comprising a web server to 
generate the web log data. 

Claim 23 (currently amended): The system of claim 22, further comprising another computing 
device to receive the web log data from the web server. 



Claim 24 (currently amended): The system of claim 21, further comprising another memory area 
to store the web log data in a plurality of files in accordance with the configuration information. 

Claim 25 (currently amended): The system of claim 21, wherein the computer storage medium 
stores computer-executable instructions to be executed on the computing device in real-time to 
receive the web log data and to filter the received web log data prior to storage of the web log 
data by evaluating the expression using the received web log data. 

Claim 26 (currently amended): A method for tracking user behavior, said method comprising: 
accessing configuration information including at least one expression defining a specific 
user navigation path; 

receiving, from a computing device web server , clickstream data to be stored from a web 
server, said clickstream data being in a format defined by said web server, said clickstream web 
data including at least one condition, said condition being associated with the clickstream web 
log data and affecting storage thereof; 

analyzing the received clickstream web log data by evaluating the expression from the 
accessed configuration information, said expression being evaluated by using the condition to 
determine a relationship between the user navigation path and the clickstream web log data; and 

storing at least a portion of the clickstream web log data in accordance with the 
determined relationship without modifying the format of the received clickstream web log data 
defined by the web server . 

Claim 27 (original): The method of claim 26, wherein storing the clickstream data comprises 
storing a cookie associated with the computing device in accordance with the evaluated 
expression. 
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Claim 28 (original): The method of claim 26, further comprising formatting the clickstream data 
in accordance with the accessed configuration information. 

Claim 29 (original): The method of claim 28, wherein formatting the clickstream data comprises 
separating the clickstream data into columns. 

Claim 30 (original): The method of claim 26, wherein storing the clickstream data comprises 
maintaining a sequence of evaluated expressions to track user navigational behavior. 

Claim 3 1 (original): The method of claim 26, wherein analyzing the received clickstream data 
comprises: 

forwarding the received clickstream data to a filter component to evaluate the expression 
using the condition; and 

receiving the evaluated expression from the filter component. 

Claim 32 (original): The method of claim 26, further comprising sampling the received 
clickstream data prior to storing the clickstream data. 

Claim 33 (original): The method of claim 26, wherein said receiving the clickstream data and 
said analyzing the received clickstream data occur in real-time. 

Claim 34 (previously presented): One or more computer storage media having computer- 
executable instructions for performing the method recited in claim 26. 



